Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2023-6004

Опубликовано: 03 янв. 2024
Источник: nvd
CVSS3: 4.8
EPSS Низкий

Описание

A flaw was found in libssh. By utilizing the ProxyCommand or ProxyJump feature, users can exploit unchecked hostname syntax on the client. This issue may allow an attacker to inject malicious code into the command of the features mentioned through the hostname parameter.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:libssh:libssh:*:*:*:*:*:*:*:*
Версия от 0.8.0 (включая) до 0.9.8 (исключая)
cpe:2.3:a:libssh:libssh:*:*:*:*:*:*:*:*
Версия от 0.10.0 (включая) до 0.10.6 (исключая)
Конфигурация 2

Одно из

cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*

EPSS

Процентиль: 16%
0.00051
Низкий

4.8 Medium

CVSS3

Дефекты

CWE-74
CWE-74

Связанные уязвимости

CVSS3: 4.8
ubuntu
около 2 лет назад

A flaw was found in libssh. By utilizing the ProxyCommand or ProxyJump feature, users can exploit unchecked hostname syntax on the client. This issue may allow an attacker to inject malicious code into the command of the features mentioned through the hostname parameter.

CVSS3: 4.8
redhat
около 2 лет назад

A flaw was found in libssh. By utilizing the ProxyCommand or ProxyJump feature, users can exploit unchecked hostname syntax on the client. This issue may allow an attacker to inject malicious code into the command of the features mentioned through the hostname parameter.

CVSS3: 4.8
msrc
10 месяцев назад

Описание отсутствует

CVSS3: 4.8
debian
около 2 лет назад

A flaw was found in libssh. By utilizing the ProxyCommand or ProxyJump ...

CVSS3: 3.9
github
около 2 лет назад

A flaw was found in libssh. By utilizing the ProxyCommand or ProxyJump feature, users can exploit unchecked hostname syntax on the client. This issue may allow an attacker to inject malicious code into the command of the features mentioned through the hostname parameter.

EPSS

Процентиль: 16%
0.00051
Низкий

4.8 Medium

CVSS3

Дефекты

CWE-74
CWE-74